1. Information we collect

• Account information. When you sign in we store your email address and an authentication identifier so we can keep your projects, series and settings associated with your account.
• How we authenticate. You can also sign in with Google, Facebook, or Apple, where available. We use these solely to verify your identity and to pre-fill your profile (email address and name) — we do not request or store anything else from these accounts, and we never receive your password for them.
• Content you create. The prompts, character descriptions, reference images, scripts, generated images, audio and videos you produce with the Service.
• Connected account tokens. When you connect a YouTube (Google), TikTok, or Instagram (Meta) account, we store the OAuth access (and, where the platform issues one, refresh) tokens so we can publish videos on your behalf. These tokens are stored encrypted at rest, used only to publish the videos you request, and deleted as soon as you disconnect the account. We do not receive or store your account password for any of these platforms.
• Support / diagnostic information. If you submit a bug report from within the app, we store the message you write along with the page URL and your browser’s user-agent string to help us reproduce and fix the issue.

2. YouTube API Services

AutoNarrate uses YouTube API Services. By connecting your YouTube channel you agree to be bound by the YouTube Terms of Service. Google’s Privacy Policy applies to Google’s handling of your data: https://policies.google.com/privacy.

When you connect a channel we request only the scopes needed to do this:

• youtube.upload — to upload the videos you generate to your channel.
• youtube.readonly — to read your channel name so you can tell which channel is connected, and to show basic statistics (views, likes) for the videos you uploaded through AutoNarrate.
• userinfo.profile — to display the connected account name when a channel title is unavailable.

When you connect a channel we store an OAuth access/refresh token, your channel ID and channel title in our database (Supabase, EU region) so that we can upload the videos you create in AutoNarrate, set their thumbnail/title/description, and show basic statistics (views, likes) for those videos. We do not read, download or modify any other content on your channel, and we never share these tokens with third parties.

Tokens are kept until you disconnect the channel in the app (open the series, go to its Automation & Social Accounts section, and disconnect the channel) or delete your account; disconnecting deletes the token immediately. You can also revoke AutoNarrate’s access at any time from your Google security settings: https://myaccount.google.com/permissions.

AutoNarrate’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained from Google APIs is used solely to provide and improve the video-upload features you request; it is not sold, and it is not used for advertising, transferred to third parties except as needed to provide the Service, or used for any purpose unrelated to uploading your videos.

Who we share Google user data with

Data we obtain from Google APIs (your OAuth access/refresh token, channel ID, channel title, and the ID and basic statistics of the videos you upload) is shared only with the following parties, and only as needed to provide the Service:

• Supabase (EU region) — our database and file storage provider; this is where your tokens and channel information are stored.
• Vercel — the hosting platform AutoNarrate runs on; requests pass through it.
• GitHub Actions — the render worker that produces your videos; the step that uploads a video to your channel runs there.
• Google/YouTube itself — the data is sent back to Google as part of uploading your video.

We do not transfer, sell, or rent Google user data to any other third party. We do not use it for advertising or targeted advertising, for data brokering, for credit or lending eligibility determinations, or to train or improve generalized AI/ML models. We only disclose it beyond the parties listed above where required by law, such as in response to a court order.

3. How we use your information

• To generate scripts, images, narration and videos you request.
• To upload and publish videos to the channels you explicitly connect and choose.
• To save your series, characters and settings between sessions.
• To operate, maintain, secure and improve the Service.

4. Third-party services

To provide the Service we send the content you create to the following processors: Anthropic (script generation), Google Gemini (image generation and text-to-speech), Pollinations (image generation fallback when other providers are unavailable), GitHub Actions (the render worker that produces every video), Supabase (authentication, database and file storage), and Vercel (hosting and product analytics). Each processes data only to perform its function for the Service.

5. Payments

If you subscribe to a paid plan, your payment is handled entirely by our payment provider, which acts as our Merchant of Record. Your card details never touch our servers — the provider processes and stores them directly. We store your payment provider’s customer ID, subscription ID and subscription status so we can grant and manage your credits, and we store the IDs of processed billing webhook events so the same event is never applied twice.

6. Data retention

We keep your account data, content and connected-account tokens for as long as your account is active. You can remove a connected channel at any time from within the app, which deletes its stored tokens. You may request deletion of your account and associated data by contacting us (see below).

7. Revoking access

You can disconnect a YouTube, TikTok or Instagram account at any time from within AutoNarrate, which deletes its stored tokens immediately and stops any further publishing on your behalf. You can also revoke access directly from the platform: for YouTube, from your Google Account permissions page; for Instagram/Meta, from your Meta Accounts Center “Apps and websites” settings; for TikTok, from your TikTok app’s Settings → Security → “Manage account” → “Apps and websites” page.

8. Security

Access and refresh tokens are stored in our database with row-level security so that only your account can read them. We use industry-standard measures to protect your data, though no method of transmission or storage is completely secure.

9. Children’s privacy

AutoNarrate is not directed to children under 13, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page.

11. Contact

For any questions about this Privacy Policy or your data, contact us at info@esyapps.com.